@qlucent/fishi 0.11.0 → 0.14.1

package/dist/index.js

@@ -2,7 +2,7 @@
 
 // src/index.ts
 import { Command } from "commander";
-import chalk12 from "chalk";
+import chalk14 from "chalk";
 
 // src/commands/init.ts
 import chalk from "chalk";
@@ -2275,11 +2275,198 @@ async function designCommand(action, options) {
   }
 }
 
+// src/commands/security.ts
+import chalk12 from "chalk";
+import ora3 from "ora";
+import fs14 from "fs";
+import path14 from "path";
+import { runSecurityScan, generateSecurityReport, getScanRules } from "@qlucent/fishi-core";
+async function securityCommand(action, options) {
+  const targetDir = process.cwd();
+  if (action === "scan") {
+    console.log("");
+    console.log(chalk12.cyan.bold("  FISHI Security Scanner"));
+    console.log(chalk12.gray("  Native SAST + OWASP vulnerability detection"));
+    console.log("");
+    const spinner = ora3("Scanning for vulnerabilities...").start();
+    const report = runSecurityScan(targetDir);
+    spinner.succeed(`Scanned ${report.summary.filesScanned} files`);
+    console.log("");
+    if (options.json) {
+      console.log(JSON.stringify(report, null, 2));
+    } else {
+      const severityOrder = ["critical", "high", "medium", "low", "info"];
+      const severityColors = {
+        critical: chalk12.red.bold,
+        high: chalk12.red,
+        medium: chalk12.yellow,
+        low: chalk12.blue,
+        info: chalk12.gray
+      };
+      for (const sev of severityOrder) {
+        const sevFindings = report.findings.filter((f) => f.severity === sev);
+        if (sevFindings.length === 0) continue;
+        console.log(severityColors[sev](`  ${sev.toUpperCase()} (${sevFindings.length})`));
+        for (const f of sevFindings) {
+          console.log(chalk12.gray(`    ${f.file}:${f.line}`));
+          console.log(`      ${f.message}`);
+          if (f.cwe) console.log(chalk12.gray(`      ${f.cwe}`));
+          console.log(chalk12.green(`      Fix: ${f.fix}`));
+          console.log("");
+        }
+      }
+      console.log(chalk12.white.bold("  Summary"));
+      if (report.summary.critical > 0) console.log(chalk12.red(`    Critical: ${report.summary.critical}`));
+      if (report.summary.high > 0) console.log(chalk12.red(`    High:     ${report.summary.high}`));
+      if (report.summary.medium > 0) console.log(chalk12.yellow(`    Medium:   ${report.summary.medium}`));
+      if (report.summary.low > 0) console.log(chalk12.blue(`    Low:      ${report.summary.low}`));
+      if (report.summary.info > 0) console.log(chalk12.gray(`    Info:     ${report.summary.info}`));
+      console.log(`    Total:    ${report.summary.total}`);
+      console.log(`    Status:   ${report.summary.passed ? chalk12.green("PASSED") : chalk12.red("FAILED")}`);
+      console.log("");
+    }
+    const outputPath = options.output || (fs14.existsSync(path14.join(targetDir, ".fishi")) ? path14.join(targetDir, ".fishi", "security-report.md") : null);
+    if (outputPath) {
+      const dir = path14.dirname(outputPath);
+      if (!fs14.existsSync(dir)) fs14.mkdirSync(dir, { recursive: true });
+      fs14.writeFileSync(outputPath, generateSecurityReport(report), "utf-8");
+      console.log(chalk12.green(`  Report saved to ${path14.relative(targetDir, outputPath)}`));
+      console.log("");
+    }
+    if (!report.summary.passed) process.exit(1);
+  } else if (action === "rules") {
+    const rules = getScanRules();
+    console.log("");
+    console.log(chalk12.cyan.bold("  FISHI Security Scanner \u2014 Rules"));
+    console.log(chalk12.gray(`  ${rules.length} rules active`));
+    console.log("");
+    const byCategory = {};
+    for (const r of rules) {
+      if (!byCategory[r.category]) byCategory[r.category] = [];
+      byCategory[r.category].push(r);
+    }
+    for (const [cat, catRules] of Object.entries(byCategory)) {
+      console.log(chalk12.white.bold(`  ${cat}`));
+      for (const r of catRules) {
+        const sevColor = r.severity === "critical" ? chalk12.red : r.severity === "high" ? chalk12.red : r.severity === "medium" ? chalk12.yellow : chalk12.blue;
+        console.log(`    ${sevColor(r.severity.padEnd(8))} ${r.id}${r.cwe ? chalk12.gray(` (${r.cwe})`) : ""}`);
+        console.log(chalk12.gray(`             ${r.message}`));
+      }
+      console.log("");
+    }
+  } else {
+    console.log(chalk12.yellow(`  Unknown action: ${action}. Use: scan, rules`));
+  }
+}
+
+// src/commands/patterns.ts
+import chalk13 from "chalk";
+import fs15 from "fs";
+import path15 from "path";
+import {
+  getPatternCategories,
+  getPattern,
+  searchPatterns,
+  saveSelectedPatterns,
+  readSelectedPatterns,
+  generatePatternGuide
+} from "@qlucent/fishi-core";
+async function patternsCommand(action, options) {
+  const targetDir = process.cwd();
+  if (action === "list") {
+    console.log("");
+    console.log(chalk13.cyan.bold("  FISHI Pattern Marketplace"));
+    console.log(chalk13.gray("  Pre-built architectural blueprints for common integrations"));
+    console.log("");
+    const categories = getPatternCategories();
+    for (const cat of categories) {
+      console.log(chalk13.white.bold(`  ${cat.name}`));
+      console.log(chalk13.gray(`  ${cat.description}`));
+      for (const p of cat.patterns) {
+        console.log(chalk13.gray(`    - ${chalk13.cyan(p.id)} \u2014 ${p.name} (${p.tools.join(", ")})`));
+      }
+      console.log("");
+    }
+    const total = categories.reduce((s, c) => s + c.patterns.length, 0);
+    console.log(chalk13.gray(`  ${categories.length} categories, ${total} patterns available`));
+    console.log("");
+  } else if (action === "search") {
+    if (!options.query) {
+      console.log(chalk13.yellow('  Usage: fishi patterns search --query "stripe"'));
+      return;
+    }
+    const results = searchPatterns(options.query);
+    console.log("");
+    console.log(chalk13.cyan.bold(`  Search: "${options.query}" \u2014 ${results.length} results`));
+    console.log("");
+    for (const p of results) {
+      console.log(`  ${chalk13.cyan(p.id)} \u2014 ${p.name} [${p.category}]`);
+      console.log(chalk13.gray(`    ${p.description}`));
+      console.log(chalk13.gray(`    Tools: ${p.tools.join(", ")}`));
+      console.log("");
+    }
+  } else if (action === "info") {
+    if (!options.query) {
+      console.log(chalk13.yellow('  Usage: fishi patterns info --query "stripe"'));
+      return;
+    }
+    const pattern = getPattern(options.query);
+    if (!pattern) {
+      console.log(chalk13.yellow(`  Pattern "${options.query}" not found. Run: fishi patterns list`));
+      return;
+    }
+    console.log("");
+    console.log(chalk13.cyan.bold(`  ${pattern.name}`));
+    console.log(chalk13.gray(`  Category: ${pattern.category}`));
+    console.log(chalk13.gray(`  Tools: ${pattern.tools.join(", ")}`));
+    console.log("");
+    console.log(pattern.guide);
+  } else if (action === "select") {
+    if (!options.query) {
+      console.log(chalk13.yellow('  Usage: fishi patterns select --query "stripe,auth0,sendgrid"'));
+      return;
+    }
+    const ids = options.query.split(",").map((s) => s.trim());
+    const valid = [];
+    const invalid = [];
+    for (const id of ids) {
+      if (getPattern(id)) valid.push(id);
+      else invalid.push(id);
+    }
+    if (invalid.length > 0) {
+      console.log(chalk13.yellow(`  Unknown patterns: ${invalid.join(", ")}`));
+    }
+    if (valid.length > 0) {
+      saveSelectedPatterns(targetDir, valid);
+      const guide = generatePatternGuide(valid);
+      const guidePath = path15.join(targetDir, ".fishi", "patterns-guide.md");
+      fs15.writeFileSync(guidePath, guide, "utf-8");
+      console.log(chalk13.green(`  Selected ${valid.length} patterns: ${valid.join(", ")}`));
+      console.log(chalk13.green(`  Guide saved to .fishi/patterns-guide.md`));
+    }
+  } else if (action === "selected") {
+    const selected = readSelectedPatterns(targetDir);
+    if (selected.length === 0) {
+      console.log(chalk13.gray('  No patterns selected. Run: fishi patterns select --query "stripe,auth0"'));
+      return;
+    }
+    console.log("");
+    console.log(chalk13.cyan.bold("  Selected Patterns"));
+    for (const id of selected) {
+      const p = getPattern(id);
+      if (p) console.log(`  ${chalk13.cyan(p.id)} \u2014 ${p.name} (${p.tools.join(", ")})`);
+    }
+    console.log("");
+  } else {
+    console.log(chalk13.yellow(`  Unknown action: ${action}. Use: list, search, info, select, selected`));
+  }
+}
+
 // src/index.ts
 var program = new Command();
 program.name("fishi").description(
-  chalk12.cyan("\u{1F41F} FISHI") + " \u2014 Your AI Dev Team That Actually Ships\n   Autonomous agent framework for Claude Code"
-).version("0.11.0");
+  chalk14.cyan("\u{1F41F} FISHI") + " \u2014 Your AI Dev Team That Actually Ships\n   Autonomous agent framework for Claude Code"
+).version("0.14.1");
 program.command("init").description("Initialize FISHI in the current directory").argument("[description]", "Project description (skip wizard with zero-config)").option("-l, --language <lang>", "Primary language (e.g., typescript, python)").option("-f, --framework <framework>", "Framework (e.g., nextjs, express, django)").option(
   "-c, --cost-mode <mode>",
   "Cost mode: performance | balanced | economy",
@@ -2295,4 +2482,6 @@ program.command("sandbox").description("Sandbox status and policy management").a
 program.command("quickstart").description("Vibe mode \u2014 skip gates, scaffold + start dev server immediately").argument("[description]", "What are you building?").option("-l, --language <lang>", "Primary language").option("-f, --framework <framework>", "Framework").option("-c, --cost-mode <mode>", "Cost mode", "balanced").option("--dev-cmd <cmd>", "Custom dev server command").option("--port <port>", "Dev server port").action(quickstartCommand);
 program.command("preview").description("Start live preview dev server").option("--dev-cmd <cmd>", "Custom dev server command").option("--port <port>", "Dev server port").action(previewCommand);
 program.command("design").description("Design system \u2014 detect tokens, init design system, validate with Brand Guardian").argument("<action>", "Action: detect | init | validate").option("-o, --output <path>", "Output path for design config").action(designCommand);
+program.command("security").description("Security scanner \u2014 native SAST + OWASP vulnerability detection").argument("<action>", "Action: scan | rules").option("-o, --output <path>", "Save report to file").option("--json", "Output as JSON").action(securityCommand);
+program.command("patterns").description("Pattern marketplace \u2014 browse, search, select integration blueprints").argument("<action>", "Action: list | search | info | select | selected").option("-q, --query <query>", "Search query or pattern ID(s)").option("-c, --category <category>", "Filter by category").option("-o, --output <path>", "Save guide to file").action(patternsCommand);
 program.parse();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qlucent/fishi",
-  "version": "0.11.0",
+  "version": "0.14.1",
   "description": "FISHI — Your AI Dev Team That Actually Ships. Autonomous agent framework for Claude Code.",
   "license": "MIT",
   "type": "module",